kovenantz.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number b3:a3:65:eb:40:97:5d:43:c6:45:4f:c5:88:74:c2:0d was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kovenantz.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): b3:a3:65:eb:40:97:5d:43:c6:45:4f:c5:88:74:c2:0d
Serial Number (int): 238780222795419306681693654169083494925
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 1f:59:d2:24:e8:c1:4d:18:84:9a:07:fd:4e:7a:72:3c:4a:35:cf:8f
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 7d:80:73:3f:c7:d8:ba:72:c5:95:3b:39:cb:56:af:25:a5:13:17:46
Fingerprint (sha256): 50:0f:ef:7e:cd:ca:3a:19:44:16:83:2b:91:70:90:f8:cf:d2:21:ba:71:03:89:bd:70:4e:6d:47:63:ea:18:02

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate kovenantz.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kovenantz.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kovenantz.com
www.kovenantz.com

Other certificates including the domain name kovenantz.com

(limited to 100 certificates)
hrms.rzpeople.in
people.nuronics.com
people.trustea.org
people.kovenantz.com
hrms.stellaripe.co.uk
employee.cronbay-tech.com
projects.presymec.com
hr.fraxus3d.com
bigfish.spacematrix.com
projects.presymec.com
projects.presymec.com
projects.presymec.com
myhrms.sushmaindustries.com
hrms.feroai.com
team.capitsign.com
hrms.stellaripe.co.uk
people.kovenantz.com
hrms.betaarrays.com
hrms.stellaripe.co.uk
projects.innovelenergy.com
myhrportal.kidzbrains.in
people.kovenantz.com
projects.innovelenergy.com
projects.touchstoneinfotech.com
myhrms.sushmaindustries.com
projects.touchstoneinfotech.com
people.nocapmeta.in
people.kovenantz.com
people.kovenantz.com
people.kovenantz.com
hrms.aatmia.com
projects.innovelenergy.com
people.kovenantz.com
kovenantz.com
projects.kovenantz.com
team.capitsign.com
people.sipl.one
people.nuronics.com
projects.overturerede.us
www.ahsassuredservices.com
myhrms.excelsiorbilling.com
people.kovenantz.com
people.kovenantz.com
people.contrivers.in
people.kovenantz.com
bigfish.spacematrix.com
people.agreefy.com
people.kovenantz.com
hr.fraxus3d.com
people.nocapmeta.in
projects.webcafe.tech
people.sipl.one
people.nuronics.com
hrms.beesbuzztech.com
bigfish.spacematrix.com
bigfish.spacematrix.com
bigfish.spacematrix.com
www.ahsassuredservices.com
kovenantz.com
projects.efusionsoft.com
projects.overturerede.us
projects.webcafe.tech
people.kovenantz.com
myhrportal.kidzbrains.in
projects.zustpe.com
projects.touchstoneinfotech.com
www.myga.in
projects.touchstoneinfotech.com
projects.presymec.com
mitchellmartinindiahrms.itmmi.com
people.trustea.org
scrum.42andmore.com
bigfish.spacematrix.com
projects.kovenantz.com
people.kovenantz.com
people.kovenantz.com
people.uretekindia.com
people.nocapmeta.in
projects.webcafe.tech
projects.kovenantz.com
hrms.rzpeople.in
bigfish.spacematrix.com
hrms.voziq.com
hrms.rzpeople.in
people.thetouchup.xyz
myhrms.excelsiorbilling.com
hr.fraxus3d.com
people.ka32.in
people.trustea.org
people.kovenantz.com
mitchellmartinindiahrms.itmmi.com
hrms.stellaripe.co.uk
people.kovenantz.com
myhrms.excelsiorbilling.com
people.nocapmeta.in
projects.presymec.com
employee.cronbay-tech.com
bigfish.spacematrix.com
bigfish.spacematrix.com
hrms.rzpeople.in

Certificate

The complete raw certificate details for kovenantz.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 238780222795419306681693654169083494925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kovenantz.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675526734952983383160157027771869889554853006062300862477767569219912738477092650879173923503784484333459656495319447671684091117336798433210415288502879764252091692914068012359091432870224659998760345385431649523635444596991759279769725742667872686071611691592078569353204564882885246649910073531699664494451573539702186393951433499007398291267749211662664200099327390373993766028152542814560789967426601088709635964297442838317024264883332095977635067798366979615272838915920986888050830570541842793399463690160721057245813658270590498064098576216563665179906157351257421524867838718020988998410664446425066938915250264452240864733198570759981212924615049399699733174718360591899361466205922128516659622240891069297186065704407353963566275912508886657088514886331913347307125345538254745008219586594454873234360753708473853855964503587123312936521377922531553266071115685173819554072877124362360234752071208631619798962852270777636569918062756016842891464220353752648901063357955891932928568824520248574337124534055651958235152578627765995891733819678373832070920121958320009672434921950276537133169535080817868548494561914028200854676456231819456375406942637301234597820661204199800209394486630656941738295098098740473498865426259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f59d224e8c14d18849a07fd4e7a723c4a35cf8f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kovenantz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kovenantz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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